codymaster 5.2.0 → 7.0.1

package/dist/dashboard.js

@@ -4,21 +4,33 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.launchDashboard = launchDashboard;
+/// <reference types="pino-http" />
 const express_1 = __importDefault(require("express"));
 const chalk_1 = __importDefault(require("chalk"));
 const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
 const crypto_1 = __importDefault(require("crypto"));
+const pino_1 = __importDefault(require("pino"));
+const pino_http_1 = __importDefault(require("pino-http"));
 const data_1 = require("./data");
 const agent_dispatch_1 = require("./agent-dispatch");
+const event_bus_1 = require("./realtime/event-bus");
+const ws_hub_1 = require("./realtime/ws-hub");
 const continuity_1 = require("./continuity");
 const judge_1 = require("./judge");
 const skill_chain_1 = require("./skill-chain");
+const validate_1 = require("./schemas/validate");
+const task_schema_1 = require("./schemas/task-schema");
+const security_headers_1 = require("./middleware/security-headers");
 // ─── Dashboard Server ───────────────────────────────────────────────────────
 function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
     const app = (0, express_1.default)();
     app.disable('x-powered-by');
+    app.use((0, security_headers_1.securityHeaders)());
     app.use(express_1.default.json({ limit: '1mb' }));
+    const logger = (0, pino_1.default)({ level: 'info' });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    app.use((0, pino_http_1.default)({ logger: logger }));
     const publicDir = path_1.default.join(__dirname, '..', 'public', 'dashboard');
     app.use(express_1.default.static(publicDir));
     // ─── Project API ────────────────────────────────────────────────────────
@@ -30,7 +42,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         });
         res.json(enriched);
     });
-    app.post('/api/projects', (req, res) => {
+    app.post('/api/projects', (0, validate_1.validateBody)(task_schema_1.createProjectSchema), (req, res) => {
         const data = (0, data_1.loadData)();
         const { name, path: pp, agents } = req.body;
         if (!name || typeof name !== 'string') {
@@ -82,7 +94,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             tasks = tasks.filter(t => t.projectId === req.query.projectId);
         res.json(tasks);
     });
-    app.post('/api/tasks', (req, res) => {
+    app.post('/api/tasks', (0, validate_1.validateBody)(task_schema_1.createTaskSchema), (req, res) => {
         const data = (0, data_1.loadData)();
         const { title, description, column, priority, projectId, agent, skill } = req.body;
         if (!title || typeof title !== 'string') {
@@ -113,6 +125,8 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         }
         (0, data_1.logActivity)(data, 'task_created', `Task "${task.title}" created`, rpid, agent || '', { taskId: task.id, column: tc });
         (0, data_1.saveData)(data);
+        event_bus_1.eventBus.emitTask({ type: 'task.created', taskId: task.id, projectId: task.projectId, data: task });
+        event_bus_1.eventBus.emitActivity({ type: 'activity.added', activity: { id: crypto_1.default.randomUUID(), type: 'task_created', message: `Task "${task.title}" created`, projectId: rpid, taskId: task.id, actorId: agent || '', createdAt: new Date().toISOString() } });
         res.status(201).json(task);
     });
     app.post('/api/tasks/sync', (req, res) => {
@@ -141,12 +155,15 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         }
         (0, data_1.logActivity)(data, 'task_created', `Synced ${created.length} tasks`, project.id, agent || '', { count: created.length });
         (0, data_1.saveData)(data);
+        for (const t of created) {
+            event_bus_1.eventBus.emitTask({ type: 'task.created', taskId: t.id, projectId: t.projectId, data: t });
+        }
         res.status(201).json({ project, tasks: created });
     });
     // ─── Auto-Sync (Conversation Lifecycle) ─────────────────────────────
     // Agents and webhooks call this to report conversation status.
     // Upserts by conversationId — creates task if missing, transitions if status changes.
-    app.post('/api/tasks/auto-sync', (req, res) => {
+    app.post('/api/tasks/auto-sync', (0, validate_1.validateBody)(task_schema_1.autoSyncSchema), (req, res) => {
         const data = (0, data_1.loadData)();
         const { conversationId, title, status, agent, skill, projectId, projectName, priority } = req.body;
         if (!conversationId || !title) {
@@ -161,11 +178,12 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             'started': 'in-progress',
             'active': 'in-progress',
             'in-progress': 'in-progress',
+            'in_progress': 'in-progress',
             'idle': 'in-progress',
             'review': 'review',
             'completed': 'done',
             'done': 'done',
-            'cancelled': 'done',
+            'cancelled': 'cancelled',
         };
         const column = STATUS_TO_COLUMN[status || 'active'] || 'in-progress';
         // Find project — try by ID, then by name, then use first project
@@ -204,8 +222,10 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
                 data.tasks.filter(t => t.column === oldCol && t.projectId === task.projectId).sort((a, b) => a.order - b.order).forEach((t, i) => { t.order = i; });
                 const actType = column === 'done' ? 'task_done' : 'task_transitioned';
                 (0, data_1.logActivity)(data, actType, `Auto-sync: "${task.title}" ${oldCol} → ${column}`, task.projectId, agent || task.agent, { from: oldCol, to: column, conversationId });
+                event_bus_1.eventBus.emitTask({ type: 'task.transitioned', taskId: task.id, projectId: task.projectId, data: { from: oldCol, to: column } });
             }
             (0, data_1.saveData)(data);
+            event_bus_1.eventBus.emitTask({ type: 'task.updated', taskId: task.id, projectId: task.projectId, data: data.tasks[taskIdx] });
             res.json({ action: 'updated', task: data.tasks[taskIdx] });
         }
         else {
@@ -229,6 +249,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             data.tasks.push(task);
             (0, data_1.logActivity)(data, 'task_created', `Auto-sync: "${task.title}" created in ${column}`, project.id, agent || '', { conversationId });
             (0, data_1.saveData)(data);
+            event_bus_1.eventBus.emitTask({ type: 'task.created', taskId: task.id, projectId: task.projectId, data: task });
             res.status(201).json({ action: 'created', task });
         }
     });
@@ -252,13 +273,14 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         }
         res.json({ removed, remaining: data.tasks.length });
     });
-    app.put('/api/tasks/:id', (req, res) => {
+    app.put('/api/tasks/:id', (0, validate_1.validateBody)(task_schema_1.updateTaskSchema), (req, res) => {
         const data = (0, data_1.loadData)();
         const idx = data.tasks.findIndex(t => t.id === req.params.id);
         if (idx === -1) {
             res.status(404).json({ error: 'Task not found' });
             return;
         }
+        req.log = req.log.child({ task_id: data.tasks[idx].id });
         const { title, description, priority, agent, skill } = req.body;
         if (title !== undefined)
             data.tasks[idx].title = String(title).trim();
@@ -274,6 +296,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         data.tasks[idx].updatedAt = new Date().toISOString();
         (0, data_1.logActivity)(data, 'task_updated', `Task "${data.tasks[idx].title}" updated`, data.tasks[idx].projectId, agent || '');
         (0, data_1.saveData)(data);
+        event_bus_1.eventBus.emitTask({ type: 'task.updated', taskId: data.tasks[idx].id, projectId: data.tasks[idx].projectId, data: data.tasks[idx] });
         res.json(data.tasks[idx]);
     });
     app.put('/api/tasks/:id/move', (req, res) => {
@@ -283,6 +306,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             res.status(404).json({ error: 'Task not found' });
             return;
         }
+        req.log = req.log.child({ task_id: data.tasks[idx].id });
         const { column, order } = req.body;
         const vc = ['backlog', 'in-progress', 'review', 'done'];
         if (!column || !vc.includes(column)) {
@@ -304,6 +328,12 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         const actType = column === 'done' ? 'task_done' : 'task_moved';
         (0, data_1.logActivity)(data, actType, `Task "${task.title}" moved: ${oldCol} → ${column}`, task.projectId, task.agent, { from: oldCol, to: column });
         (0, data_1.saveData)(data);
+        if (oldCol !== column) {
+            event_bus_1.eventBus.emitTask({ type: 'task.transitioned', taskId: task.id, projectId: task.projectId, data: { from: oldCol, to: column } });
+        }
+        else {
+            event_bus_1.eventBus.emitTask({ type: 'task.updated', taskId: task.id, projectId: task.projectId, data: task });
+        }
         res.json(task);
     });
     // ─── Valid Transition Map ─────────────────────────────────────────────
@@ -320,6 +350,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             res.status(404).json({ error: 'Task not found' });
             return;
         }
+        req.log = req.log.child({ task_id: data.tasks[idx].id });
         const { column, reason } = req.body;
         const vc = ['backlog', 'in-progress', 'review', 'done'];
         if (!column || !vc.includes(column)) {
@@ -358,6 +389,8 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             : `Task "${task.title}" transitioned: ${oldCol} → ${column}`;
         (0, data_1.logActivity)(data, actType, msg, task.projectId, task.agent, { from: oldCol, to: column, reason: reason || '' });
         (0, data_1.saveData)(data);
+        event_bus_1.eventBus.emitTask({ type: 'task.transitioned', taskId: task.id, projectId: task.projectId, data: { from: oldCol, to: column } });
+        event_bus_1.eventBus.emitActivity({ type: 'activity.added', activity: { id: crypto_1.default.randomUUID(), type: actType, message: msg, projectId: task.projectId, taskId: task.id, actorId: task.agent, createdAt: new Date().toISOString() } });
         res.json(task);
     });
     app.post('/api/tasks/bulk-transition', (req, res) => {
@@ -429,10 +462,13 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             res.status(404).json({ error: 'Task not found' });
             return;
         }
+        req.log = req.log.child({ task_id: data.tasks[idx].id });
         const [removed] = data.tasks.splice(idx, 1);
         data.tasks.filter(t => t.column === removed.column && t.projectId === removed.projectId).sort((a, b) => a.order - b.order).forEach((t, i) => { t.order = i; });
         (0, data_1.logActivity)(data, 'task_deleted', `Task "${removed.title}" deleted`, removed.projectId, removed.agent);
         (0, data_1.saveData)(data);
+        event_bus_1.eventBus.emitTask({ type: 'task.deleted', taskId: removed.id, projectId: removed.projectId, data: {} });
+        event_bus_1.eventBus.emitActivity({ type: 'activity.added', activity: { id: crypto_1.default.randomUUID(), type: 'task_deleted', message: `Task "${removed.title}" deleted`, projectId: removed.projectId, taskId: removed.id, actorId: removed.agent, createdAt: new Date().toISOString() } });
         res.status(204).send();
     });
     // ─── Task Dispatch API ──────────────────────────────────────────────────
@@ -443,6 +479,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             res.status(404).json({ error: 'Task not found' });
             return;
         }
+        req.log = req.log.child({ task_id: task.id });
         const project = data.projects.find(p => p.id === task.projectId);
         const force = req.query.force === 'true';
         // Validate before dispatch
@@ -898,11 +935,14 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
         res.json(chain || { match: false });
     });
     // ─── Fallback ──────────────────────────────────────────────────────────
+    app.use('/api/{*path}', (_req, res) => {
+        res.status(404).json({ error: 'not found' });
+    });
     app.get('/{*path}', (_req, res) => {
         res.sendFile(path_1.default.join(publicDir, 'index.html'));
     });
     // ─── Start Server ─────────────────────────────────────────────────────
-    const server = app.listen(port, () => {
+    const server = app.listen(port, '127.0.0.1', () => {
         try {
             fs_1.default.writeFileSync(data_1.PID_FILE, String(process.pid));
         }
@@ -917,6 +957,7 @@ function launchDashboard(port = data_1.DEFAULT_PORT, silent = false) {
             console.log(chalk_1.default.gray(`  📊 Dashboard auto-started → http://codymaster.localhost:${port}`));
         }
     });
+    (0, ws_hub_1.initWsHub)(server);
     const cleanup = () => { try {
         fs_1.default.unlinkSync(data_1.PID_FILE);
     }

package/dist/data.js

@@ -1,4 +1,13 @@
 "use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -7,6 +16,8 @@ exports.DEFAULT_PORT = exports.PID_FILE = exports.DATA_FILE = exports.DATA_DIR =
 exports.ensureDataDir = ensureDataDir;
 exports.loadData = loadData;
 exports.saveData = saveData;
+exports.loadDataSafe = loadDataSafe;
+exports.saveDataSafe = saveDataSafe;
 exports.logActivity = logActivity;
 exports.findProjectByNameOrId = findProjectByNameOrId;
 exports.findTaskByIdPrefix = findTaskByIdPrefix;
@@ -15,6 +26,8 @@ const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
 const os_1 = __importDefault(require("os"));
 const crypto_1 = __importDefault(require("crypto"));
+const async_mutex_1 = require("async-mutex");
+const dataMutex = new async_mutex_1.Mutex();
 // ─── Constants ──────────────────────────────────────────────────────────────
 exports.DATA_DIR = path_1.default.join(os_1.default.homedir(), '.codymaster');
 exports.DATA_FILE = path_1.default.join(exports.DATA_DIR, 'kanban.json');
@@ -94,6 +107,28 @@ function saveData(data) {
     ensureDataDir();
     fs_1.default.writeFileSync(exports.DATA_FILE, JSON.stringify(data, null, 2));
 }
+function loadDataSafe() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const release = yield dataMutex.acquire();
+        try {
+            return loadData();
+        }
+        finally {
+            release();
+        }
+    });
+}
+function saveDataSafe(data) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const release = yield dataMutex.acquire();
+        try {
+            fs_1.default.writeFileSync(exports.DATA_FILE, JSON.stringify(data, null, 2));
+        }
+        finally {
+            release();
+        }
+    });
+}
 // ─── Activity Logger ────────────────────────────────────────────────────────
 function logActivity(data, type, message, projectId = '', agent = '', metadata = {}) {
     data.activities.unshift({

package/dist/execution/tdd-gate.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * TDD Enforcement Gate — blocks execution without tests.
+ *
+ * TRIZ Principle #10 (Prior Action):
+ *   Pre-flight check scans for test files BEFORE execution starts.
+ *
+ * TRIZ Principle #3 (Local Quality):
+ *   Each task must have its own test file before implementation.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findTestFile = findTestFile;
+exports.suggestTestFile = suggestTestFile;
+exports.runTests = runTests;
+exports.enforceTDD = enforceTDD;
+exports.hasTestFile = hasTestFile;
+const fs_1 = __importDefault(require("fs"));
+const child_process_1 = require("child_process");
+/**
+ * Find test file for a given source file.
+ * Mapping: src/foo.ts → test/foo.test.ts
+ *          src/bar/baz.ts → test/bar/baz.test.ts
+ */
+function findTestFile(sourceFile) {
+    const testFile = sourceFile
+        .replace(/^src\//, 'test/')
+        .replace(/\.ts$/, '.test.ts')
+        .replace(/\.js$/, '.test.js');
+    return fs_1.default.existsSync(testFile) ? testFile : null;
+}
+/**
+ * Suggest test file path for a given source file.
+ */
+function suggestTestFile(sourceFile) {
+    return sourceFile
+        .replace(/^src\//, 'test/')
+        .replace(/\.ts$/, '.test.ts')
+        .replace(/\.js$/, '.test.js');
+}
+/**
+ * Run tests for a specific test file and return failure count.
+ */
+function runTests(testFile) {
+    try {
+        const output = (0, child_process_1.execSync)(`npx vitest run ${testFile} --reporter=verbose`, {
+            encoding: 'utf-8',
+            timeout: 30000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return { failures: 0, output };
+    }
+    catch (error) {
+        // vitest exits with non-zero code when tests fail
+        const output = error.stdout || error.stderr || '';
+        const failMatch = output.match(/(\d+) failed/);
+        const failures = failMatch ? parseInt(failMatch[1], 10) : 1;
+        return { failures, output };
+    }
+}
+/**
+ * Enforce TDD: verify test file exists and has failing tests (RED phase).
+ *
+ * Rules:
+ * 1. Test file MUST exist for target source file
+ * 2. Tests MUST fail (RED phase) before implementation
+ * 3. If all tests pass, user must write a failing test first
+ */
+function enforceTDD(targetFiles) {
+    for (const file of targetFiles) {
+        // Skip test files themselves
+        if (file.includes('.test.') || file.includes('.spec.')) {
+            continue;
+        }
+        // Skip non-source files
+        if (!file.startsWith('src/') && !file.startsWith('lib/')) {
+            continue;
+        }
+        const testFile = findTestFile(file);
+        if (!testFile) {
+            return {
+                passed: false,
+                testFile: null,
+                message: `TDD GATE: No test file found for ${file}. Write test first: ${suggestTestFile(file)}`,
+            };
+        }
+        const result = runTests(testFile);
+        if (result.failures === 0) {
+            return {
+                passed: false,
+                testFile,
+                message: `TDD GATE: All tests pass in ${testFile}. Write a failing test for new behavior first (RED phase).`,
+            };
+        }
+    }
+    return { passed: true, testFile: null, message: 'TDD GATE: OK — failing tests found (RED phase)' };
+}
+/**
+ * Quick check: does test file exist? (no execution, fast)
+ */
+function hasTestFile(targetFiles) {
+    for (const file of targetFiles) {
+        if (file.includes('.test.') || file.includes('.spec.'))
+            continue;
+        if (!file.startsWith('src/') && !file.startsWith('lib/'))
+            continue;
+        if (!findTestFile(file))
+            return false;
+    }
+    return true;
+}

package/dist/executor/cancel.js

@@ -0,0 +1,34 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cancelTask = cancelTask;
+const child_process_1 = require("child_process");
+const os_1 = __importDefault(require("os"));
+function cancelTask(taskId, pgid) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (os_1.default.platform() === 'win32') {
+            (0, child_process_1.execFileSync)('taskkill', ['/PID', String(pgid), '/T', '/F'], { timeout: 10000 });
+        }
+        else {
+            process.kill(-pgid, 'SIGTERM');
+            yield new Promise(resolve => setTimeout(resolve, 5000));
+            try {
+                process.kill(-pgid, 'SIGKILL');
+            }
+            catch (_a) {
+                // already dead
+            }
+        }
+    });
+}

package/dist/executor/gc.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startGcLoop = startGcLoop;
+exports.gcPass = gcPass;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const WORKSPACES_ROOT = path_1.default.join(os_1.default.homedir(), '.cm', 'workspaces');
+const DEFAULT_GC_TTL_MS = 24 * 60 * 60 * 1000; // 24h
+const DEFAULT_GC_ORPHAN_TTL_MS = 72 * 60 * 60 * 1000; // 72h
+const GC_INTERVAL_MS = 60 * 60 * 1000; // 1h
+function startGcLoop() {
+    return setInterval(() => {
+        gcPass();
+    }, GC_INTERVAL_MS);
+}
+function gcPass() {
+    let removed = 0;
+    let errors = 0;
+    if (!fs_1.default.existsSync(WORKSPACES_ROOT)) {
+        return { removed, errors };
+    }
+    const now = Date.now();
+    try {
+        const projects = fs_1.default.readdirSync(WORKSPACES_ROOT);
+        for (const project of projects) {
+            const projectDir = path_1.default.join(WORKSPACES_ROOT, project);
+            if (!fs_1.default.statSync(projectDir).isDirectory())
+                continue;
+            try {
+                const tasks = fs_1.default.readdirSync(projectDir);
+                for (const task of tasks) {
+                    const taskDir = path_1.default.join(projectDir, task);
+                    if (!fs_1.default.statSync(taskDir).isDirectory())
+                        continue;
+                    const gcMetaPath = path_1.default.join(taskDir, '.gc_meta.json');
+                    try {
+                        if (fs_1.default.existsSync(gcMetaPath)) {
+                            const meta = JSON.parse(fs_1.default.readFileSync(gcMetaPath, 'utf-8'));
+                            if (meta.completedAt) {
+                                const completedTime = new Date(meta.completedAt).getTime();
+                                if (now - completedTime > DEFAULT_GC_TTL_MS) {
+                                    fs_1.default.rmSync(taskDir, { recursive: true, force: true });
+                                    removed++;
+                                }
+                            }
+                        }
+                        else {
+                            const stat = fs_1.default.statSync(taskDir);
+                            const age = now - stat.mtimeMs;
+                            if (age > DEFAULT_GC_ORPHAN_TTL_MS) {
+                                fs_1.default.rmSync(taskDir, { recursive: true, force: true });
+                                removed++;
+                            }
+                        }
+                    }
+                    catch (_a) {
+                        errors++;
+                    }
+                }
+            }
+            catch (_b) {
+                errors++;
+            }
+        }
+    }
+    catch (_c) {
+        errors++;
+    }
+    return { removed, errors };
+}

package/dist/executor/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cancelTask = exports.runTask = exports.gcPass = exports.startGcLoop = exports.reuseWorkdir = exports.writeGcMeta = exports.prepareWorkdir = void 0;
+var workdir_1 = require("./workdir");
+Object.defineProperty(exports, "prepareWorkdir", { enumerable: true, get: function () { return workdir_1.prepareWorkdir; } });
+Object.defineProperty(exports, "writeGcMeta", { enumerable: true, get: function () { return workdir_1.writeGcMeta; } });
+Object.defineProperty(exports, "reuseWorkdir", { enumerable: true, get: function () { return workdir_1.reuseWorkdir; } });
+var gc_1 = require("./gc");
+Object.defineProperty(exports, "startGcLoop", { enumerable: true, get: function () { return gc_1.startGcLoop; } });
+Object.defineProperty(exports, "gcPass", { enumerable: true, get: function () { return gc_1.gcPass; } });
+var runner_1 = require("./runner");
+Object.defineProperty(exports, "runTask", { enumerable: true, get: function () { return runner_1.runTask; } });
+var cancel_1 = require("./cancel");
+Object.defineProperty(exports, "cancelTask", { enumerable: true, get: function () { return cancel_1.cancelTask; } });

package/dist/executor/runner.js

@@ -0,0 +1,70 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __asyncValues = (this && this.__asyncValues) || function (o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runTask = runTask;
+const workdir_1 = require("./workdir");
+function runTask(opts) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { backend, taskId, projectId, prompt, execOpts, eventBus, priorWorkdir, pinnedSessionId, } = opts;
+        const projectShort = projectId.slice(0, 8);
+        const taskShort = taskId.slice(0, 8);
+        const workdir = priorWorkdir !== null && priorWorkdir !== void 0 ? priorWorkdir : (0, workdir_1.prepareWorkdir)(projectShort, taskShort);
+        const resolvedOpts = Object.assign(Object.assign({}, execOpts), { cwd: workdir, resumeSessionId: pinnedSessionId !== null && pinnedSessionId !== void 0 ? pinnedSessionId : execOpts.resumeSessionId });
+        const session = yield backend.execute(prompt, resolvedOpts);
+        let lastSessionId = pinnedSessionId;
+        const messageLoop = (() => __awaiter(this, void 0, void 0, function* () {
+            var _a, e_1, _b, _c;
+            try {
+                for (var _d = true, _e = __asyncValues(session.messages), _f; _f = yield _e.next(), _a = _f.done, !_a; _d = true) {
+                    _c = _f.value;
+                    _d = false;
+                    const msg = _c;
+                    emitAgentMessage(eventBus, taskId, projectId, msg);
+                    if (msg.type === 'text' && msg.sessionId) {
+                        lastSessionId = msg.sessionId;
+                    }
+                }
+            }
+            catch (e_1_1) { e_1 = { error: e_1_1 }; }
+            finally {
+                try {
+                    if (!_d && !_a && (_b = _e.return)) yield _b.call(_e);
+                }
+                finally { if (e_1) throw e_1.error; }
+            }
+        }))();
+        const [result] = yield Promise.all([session.result, messageLoop]);
+        if (lastSessionId && !result.sessionId) {
+            result.sessionId = lastSessionId;
+        }
+        (0, workdir_1.writeGcMeta)(projectShort, taskShort, {
+            taskId,
+            projectId,
+            completedAt: new Date().toISOString(),
+        });
+        return result;
+    });
+}
+function emitAgentMessage(eventBus, taskId, projectId, msg) {
+    eventBus.emitTask({
+        type: 'task.message',
+        taskId,
+        projectId,
+        data: { message: msg },
+    });
+}

package/dist/executor/workdir.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareWorkdir = prepareWorkdir;
+exports.writeGcMeta = writeGcMeta;
+exports.reuseWorkdir = reuseWorkdir;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const WORKSPACES_ROOT = path_1.default.join(os_1.default.homedir(), '.cm', 'workspaces');
+function prepareWorkdir(projectShort, taskShort) {
+    const workdir = path_1.default.join(WORKSPACES_ROOT, projectShort, taskShort, 'workdir');
+    fs_1.default.mkdirSync(workdir, { recursive: true });
+    const outputDir = path_1.default.join(WORKSPACES_ROOT, projectShort, taskShort, 'output');
+    const logsDir = path_1.default.join(WORKSPACES_ROOT, projectShort, taskShort, 'logs');
+    fs_1.default.mkdirSync(outputDir, { recursive: true });
+    fs_1.default.mkdirSync(logsDir, { recursive: true });
+    return workdir;
+}
+function writeGcMeta(projectShort, taskShort, meta) {
+    const metaPath = path_1.default.join(WORKSPACES_ROOT, projectShort, taskShort, '.gc_meta.json');
+    fs_1.default.writeFileSync(metaPath, JSON.stringify(meta, null, 2));
+}
+function reuseWorkdir(existingPath) {
+    if (!fs_1.default.existsSync(existingPath)) {
+        throw new Error(`Workdir not found: ${existingPath}`);
+    }
+    return existingPath;
+}

package/dist/handoff/contracts.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * Handoff JSON contracts for the sprint flow (v2.0).
+ *
+ * Each sprint phase emits a typed handoff JSON under `.cm/handoff/`.
+ * Downstream skills read the predecessor's handoff to pick up cold,
+ * eliminating re-derivation cost.
+ *
+ * Schema versioning: every contract has a `schema: "<name>@<n>"` field.
+ * Bump @n on breaking change; readers should reject unknown majors.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HANDOFF_FILENAMES = void 0;
+exports.HANDOFF_FILENAMES = {
+    'intent@1': 'intent.json',
+    'plan@1': 'plan.json',
+    'exec@1': 'exec.json',
+    'review@1': 'review.json',
+    'quality@1': 'quality.json',
+    'retro@1': 'retro.json',
+    'party@1': 'party.json',
+};

package/dist/handoff/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./contracts.js"), exports);
+__exportStar(require("./io.js"), exports);